High severity · published Aug 1, 2024
CVE-2024-6242
Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices
7.3
CVSS
11.1%
EPSS
No
On KEV
Description
A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.1% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
17
1756-EN2F · Rockwell Automation
v5.007(unsigned)/v5.027(signed); 1756-EN2F/C: V10.009 · source: vendor
17
1756-EN2T · Rockwell Automation
v5.007(unsigned)/v5.027(signed); 1756-EN2T/D: V10.006 · source: vendor
17
1756-EN2TP · Rockwell Automation
1756-EN2TP/A: V10.020 · source: vendor
17
1756-EN2TR · Rockwell Automation
v5.007(unsigned)/v5.027(signed); 1756-EN2TR/C: V10.007 · source: vendor
17
1756-EN3TR · Rockwell Automation
v5.007(unsigned)/v5.027(signed); 1756-EN3TR/B: V10.007 · source: vendor
17
1756-EN4TR · Rockwell Automation
V2 · source: vendor
C5
ControlLogix® 5580 (1756-L8z) · Rockwell Automation
V28 · source: vendor
G5
GuardLogix® 5580 (1756-L8zS) · Rockwell Automation
V31 · source: vendor